CVE-2026-58225 | elixir-ecto postgrex 0.22.2 Notifications handle_connect channel name sql injection

July 10, 2026 Yanac

A vulnerability, which was classified as critical, was found in elixir-ecto postgrex 0.22.2. Impacted is the function handle_connect of the component Notifications. Executing a manipulation of the argument channel name can lead to sql injection.

This vulnerability is registered as CVE-2026-58225. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More